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ABSTRACT 


Bluetooth® pairing usually involves some level of user interaction to confirm the identity of the user and/or 
the devices themselves. There are many pairing mechanisms available across the versions of Bluetooth 
(v2.0 through v4.0). This process is typically lengthy and sometimes confusing to the user, and so this 
application report is aimed at showing TI technology developers details on implementing a simplified 
pairing scheme method outlined by the NFC Forum using an MSP430F5529 (a TI ultralow power MCU), a 
TRE7970A (a TI NFC transceiver IC), and an CC2560 (a TI Bluetooth radio IC). 


Sample code described in this document can be downloaded from http://www.ti.com/lit/zip/slaa512. 


a 


Bluetooth is a registered trademark of Bluetooth SIG, Inc.. 
Android is a trademark of Google Inc.. 
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1.1 


1.2 


1.3 


1.4 


Hardware Description 


MSP-EXP430F5529 


The MSP430F5529 Experimenter Board (MSP-EXP430F5529) is a development platform for the 
MSP430F5529 device, from the latest generation of MSP430 devices with integrated USB. The board is 
compatible with many TI low-power RF wireless evaluation modules such as the TRF7970ATB module. 
The Experimenter Board helps designers quickly learn and develop using the new MSP430F55xx MCUs, 
which provide the industry's lowest active power consumption, integrated USB, and more memory and 
leading integration for other applications such as energy harvesting, wireless sensing, and automatic 
metering infrastructure (AMI). 


TRF7970ATB Module 


The TRF7970ATB module allows for the software\firmware application developer to become familiar with 
the functionalities of the TRF7970A NFC Transceiver while allowing the freedom to develop with the 
Texas Instruments MCU of their choosing. The module is hardwired for SP!| communications, supports 
slave select and TRF7970A Direct Mode 2 (default), Direct Mode 1, and Direct Mode 0 operations. The 
user also has access to and full control over the TRF7970A EN2 and EN lines, allowing for design and 
development of ultralow-power high-frequency (HF) RFID/NFC systems. The module has an onboard 
boost converter (TPS61222DCKT) which boosts 3.3 VDC to 5 VDC out to TRF7970A IC for +23 dBm (full 
transmitter power out) operations. An impedance-matching circuit from 4 Q to 50 Q is populated on the 
module, and this is connected to a tuned 50-Q antenna circuit that consists of an onboard four-turn coil 
with series and parallel passive elements (capacitors and a resistor). Connection to Texas Instruments 
microcontroller platforms are made via Samtec EM headers located on the back of the board (connectors 
P1/RF1 and P2/RF2). 


ez430-RF256X Target Board 


The eZ430-RF256X Target Board is a complete TI Bluetooth evaluation and demonstration tool for the 
MSP430 and CC2560 that includes all the necessary hardware and software in a convenient USB stick. 
The tool includes a USB-powered emulator to program and debug your application. The CC2560-based 
Bluetooth target boards features the highly integrated MSP430BT5190 ultralow-power MCU. The required 
embedded software comes pre-flashed on the MSP430 device for ease of use out of the box. The 
eZ430-RF256X SDK includes MindTree's Ethermind Bluetooth stack, Serial Port Profile (SPP), and 
embedded sample applications running on FreeRTOS. 


NOTE: The eZ430-RF256X SDK license requires that the MSP430BT5190 must be used only in 
combination with TI Bluetooth solutions such as the CC2560 for production. 


Android™ Handset (Nexus S) 


The Android™ handset used in this example is a Samsung Nexus S (http://www.samsung.com). This 
smartphone was co-developed by Google and Samsung and uses the Android "Gingerbread" operating 
system. It features integrated NFC, Bluetooth, and Wi-Fi, making it a logical choice as the handset 
component of this application example. 
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2 Operational Overview 


The purpose of this application report is to show how the Bluetooth connection and pairing process can be 
simplified using Texas Instruments NFC technology. This application report goes into some details of the 
Bluetooth pairing process; however, it is not intended to be a comprehensive primer on that topic. The 
NFC Forum Connection Handover Technical Specification (http://www.nfc-forum.org/specs/spec list/) 
outlines several methods to perform a negotiated handover, including how to use two powered devices 
using NFC technology to negotiate an alternative carrier for further data exchange between the two 
powered devices (Bluetooth or WiFi). This same specification also outlines a method for one powered and 
one passive NFC Forum tag to perform a Static Handover to enable a third (non-NFC Forum enabled 
device) to be connected and paired over the alternative carrier. This application report does not cover the 
latter method. Figure 1 shows an overview diagram of what is discussed in this document. 

TRF7970ATB 


Module NFC Forum 
(NFC Forum ; Device 
MSP430F5529 aes 


MSP-EXP430F5529 Board Nexus S$ 


(Applications 


eet) Processor ) 


ez430- 
RF2560B 


Carrier, DATA EXCHANGE OVER BLUETOOTH 


Bluetooth) 


Alternative 
Carrier 
(Bluetooth 
Radio) 


Figure 1. Negotiated Handover With Single Selection (Pairing With NFC) 


Figure 1 is a high-level view of the entire system. Section 3 describes the details of the process that is 
required to successfully complete the pairing. Section 4 and Section 5 describe the firmware/software 
code on the MSP430F5529 MCU driving the TRF7970A with SPI and communicating over UART with the 
MSP430BT5190 on the Bluetooth target board. Section 6 describes the Android application that runs on 
the handset, which was written for this example. 


3 Operational Detail 


Figure 2 shows the operational detail (command request/response) flow between the handset and the TI 
hardware. 


NOTE: The handset polls for various technologies and at different data rates, which is detected and 
handled by the TI system. Figure 2 shows the flow starting with the Tl system detecting that 
an 1$014443B command has been issued at 106 kbps (this is what the TRF7970A has been 
configured fo manage in this example). 


esi 
4 Using TI Technology to Simplify Bluetooth® Pairing Via NFC SLAA512—November 2011 
Submit Documentation Feedback 


Copyright © 2011, Texas Instruments Incorporated 


y % } 

i 4 

z 5 ‘ 

H 

* 

$ 

’ 

P) 
4 ‘ 
« 
‘ % 
j 

' 4 ee eee ee a 


1% TEXAS 
INSTRUMENTS 


www.ti.com Operational Detail 


Command Request/Response Exchange Flow 
according to applicable ISO standards or NFC Specifications 


MSP-EXP430F5529 Nexus S 
ii fi : Se 
ATQB 
TRF7970ATB 
Module NFC Device 


(NFC Device) 


Detection of NDEF Message 


SW1, SW2 complete 
NDEF Capability Container Select 
SW1, SW2 complete 


Read Binary Data Command 


NDEF Select Command 
Oe ee Handset 
(ULP MCU) Si a 
Processor) 
ez430-RF2560B 
(Alternative Alternative 
Carrier, Carrier 
Bluetooth) (Bluetooth Radio) 


After NFC Connection Handover is completed, then Data Exchange is over Bluetooth 


Figure 2. Command Request/Response Exchange Flow 


The command request and exchange flow shown in Figure 2 follows the ISO/IEC 14443-3, 
ISO/IEC 14443-4/ISO/IEC 7816-4, and NFC Forum Type 4 Tag operational specifications. 


SS A I I I EE EY EIT FE ERE ESE RO I LETT IC BE I LOCI TE EIT DES ABSA, A RE AE AEA EAS ER 
SLAA512—November 2011 Using TI Technology to Simplify Bluetooth® Pairing Via NFC 5 


Submit Documentation Feedback 
Copyright © 2011, Texas Instruments Incorporated 


4 
t 
i 
v @ 
1 
‘ 
: 
1 
r 
‘ 
. 
4 cm 
4 ' 
“ 
Rhy 


1% TEXAS 
INSTRUMENTS 


www.ti.com 


Initialize LCD © 


Initialize Radio 
Settings 
Initialize UART 


Initialize 
TR7970A 
RF Field ra 


change? No 


Yes 


1ISO014443B 
command 
received? 


Card Emulation 
State 
Bluetooth 
Communication 


Figure 4. Firmware Flowchart 


No 


Yes 


Bluetooth 
Dic? 


SLAA512—November 2011 


Submit Documentation Feedback 
Copyright © 2011, Texas Instruments Incorporated 


MSP430F 5529 Firmware 


Using TI Technology to Simplify Bluetooth® Pairing Via NFC 


1% TEXAS 
INSTRUMENTS 


MSP430F5529 Firmware www.ti.com 


4.1 


4.2 


To summarize the total operational flow in this example given, the TRF7970A is first initialized and 
configured by the microcontroller as an NFC Type 4 Tag (as 1SO14443B device running at 106 kbps). At 
the same time, the Bluetooth radio is initialized and its Bluetooth ID and the Tl NFC BT application is 
started on the handset. When the handset and the Texas Instruments NFC/BT demo system are brought 
into close proximity to each other, the handset interacts with the Tl NFC/BT system as shown in Figure 2, 
after which the Bluetooth radios in the system are then paired and handset has serial port control over 
GPIOs on the MSP430F5529, allowing the user to drive LEDs by using the touch screen on the handset. 
These actions are described in Section 4, Section 5, and Section 6. 


MSP430F5529 Firmware 


Overview 


The MSP430F5529 firmware allows the user to establish communication between a Nexus S and the 
MSP430BT5190 via Bluetooth. When communicating through NFC, there is an initiator (which generates a 
modulated magnetic field with specific patterns (called commands) to start the communication) and a 
target (which receives the initiator's commands and replies back, using load modulation). In this example, 
the TRF7970A is configured in card emulation mode, as an 1SO14443B card. The Nexus S NFC reader 
hardware is in a polling loop where it can be in sequential functional states, meaning it can be polling in 
Initiator modes, Reader/Writer Modes, Card Emulation modes, Target modes or in a Pause mode. In this 
example, we are waiting for the handset to be in the Reader/Initiator mode and specifically waiting for it to 
issue an 1S014443-3 ReqB command at 106 kbps. After the TRF7970A detects this |5014443B reader 
command, the handshake described in Figure 2 occurs. The NDEF message that is subsequently passed 
contains the MSP430BT5190 MAC address, which is the necessary packet to establish a connection with 
the Nexus S. When the Nexus S stops sending the TRF7970A 1SO14443B/NFC commands, the program 
reads the incoming commands via UART from the MSP430BT5190 and drives LEDs located on the 
MSP-EXP430F 5529 experimenter board, based on the user input on the Nexus S touch screen when 
using the Tl NFC BT app. When the Bluetooth communication terminates, the firmware on the 
MSP-EXP430F5529 board starts the process over again. 


Detail 


This section describes the details of the firmware flow and the MSP430 requirements. Figure 4 includes 
the flowchart for the program. 

The program begins by initializing the MSP430F5529: 

1. Set the MCLK frequency to 25 MHz 

2. Configure the GPIO ports 

3. Set the Veore to level 3 

4. Enable global interrupts 


Next, the LCD is initialized: 
1. Set the brightness to its maximum (11) 
2. Set the contrast is set to 11 (levels from 0 to 31, with 31 being the darkest) 


Next, the TRF7970A radio is initialized: 
1. Configure and enable GPIOs 
2. Configure the IRQ pin 
3. Configure the SPI module 
(a) Set the baud rate to 2 MHz 
(b) Set the clock phase to capture on the following edge 
(c) Set clock polarity to low 
(d) Set character length = 8 bit, 3 pin, master mode 


The UART module is used to communicate with the MSP430BT5190. The baud rate is initialized to 9600, 
and the MSP430 goes into low-power mode for 3 seconds allowing the MSP430BT5190 to configure the 
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4.2.1 


4.2.2 


4.2.3 


4.2.4 


CC2560. Afterwards, the MSP430F5529 requests the Bluetooth MAC address using command 0x39, and 
waits until it receives the 6 byte address. The MAC address is then converted to ASCII characters and 
stored to g_ndef_message[] array. The program continues to a state machine. The initial state is 
POWER_OFF_STATE, which is described in Section 4.2.1. The other states are described in 

Section 4.2.2 through Section 4.2.5. 


POWER_OFF_STATE 


This is the default state after a power on reset, or after the communication with between the Nexus S and 
the CC2560 terminates. The TRF7970A is initialized to card emulation target mode (see Appendix A). The 
LCD's screen is updated (see Figure 3). The next state is SENSE_STATE. 


Figure 3. LCD Status Screen 


SENSE_STATE 


The program polls on the IRQ pin until it becomes a 0x01 caused by a change in the RF field. The IRQ 
Status (Ox0C), Collision Position (OxOD), and NFC Target Protocol (0x19) registers are read. If the initiator, 
the Nexus S, sent an 15014443B command to the TRF7970A, the program's state changes to 
EMULATION_STATE. This occurs when the NFC target Protocol register's value is OxC5. Otherwise, the 
TRF7970A is reset and initialized to card emulation target mode (see Appendix A). 


EMULATION_STATE 


The LCD status is updated from "Waiting for Rdr" to "Tag Detected". In this state, the handshake between 
the TRF7970A and the Nexus S described in Figure 2 occurs. When the TRF7970A sends the NDEF 
message containing the Bluetooth MAC address to the Nexus, the program's state becomes 
NDEF_MESSAGE_STATE. If an error occurs in the communication with the Nexus S and causes the NFC 
Target Protocol register (0x19) register to have a value other than OxC5, the program returns to the 
SENSE_STATE. 


NDEF_MESSAGE_STATE 


The LCD status is updated from "Tag Detected" to "NDEF Msg Sent". The program will answer all the 
incoming commands from the Nexus at this point, until the NFC target Protocol register's value changes 
from OxC5. Afterwards, the program's state changes to DESELECTED_STATE. 
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4.2.5 


4.2.6 


DESELECTED_STATE 


The LCD status is updated from "NDEF Msg Sent" to "Connected to BT" and the code returns to the 


main(). 


The application in the Nexus S reads the Bluetooth MAC address and connects to the MSP430BT5190. 
The phone can send seven different commands to the MSP430F5529 (see Table 1). When the connection 


between the Nexus S and the MSP430BT5190 terminates, the program returns to the 
POWER_OFF_STATE. 


Table 1. MSP430BT5190 Commands 


Command ID Description 


MSP430 Requirements 
* RAM: approximately 2 kB 
¢ Flash: approximately 20 kB 
* SMCLK = 25 MHz 
* MCLK = 25 MHz 
¢ ACLK = 32 kHz 


NOTE: The frequency of the MCLK can be lowered to approximately 8 MHz. The firmware updates 


the LCD fast enough and communicates at 2 MHz via SPI with the TRF7970A. 
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5.2 
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MSP430BT5190 Firmware Modifications 


Overview 


The MSP430BT5190 microcontroller is designed for commercial use with TI's CC2560-based Bluetooth 
solutions in conjunction with SEM ed Ss pet ering Bigot Stack and Serial Port Erofile (ore). This 
MSP430BT5190+CC2560 Blue a 1 is ideal for applications needing a \ Ss ink 

such as remote Eontrals, reriiostate, ana metering: blood aluicose olor! pulse 
oximeters, and many others. 


MindTree's EtherMind Bluetooth SDK provides a platform for end system designers to quickly evaluate 
EtherMind Bluetooth Software Protocol Stack and Profiles, and implement applications using it. The SDK 
is available for T| MSP430BT5190 processor. The reference applications and the development tool 
included in the kit help implementers to quickly develop customized Bluetooth prototype applications on 
the MSES20B Sd g0+CC2560 halts ins SDK supports the Serial Port Profle (SPP). FreeRTOS is 
sec t the th r and write tasks. Users can develop their own application and interact 
with the Bluetooth Ethermind Stack APIs te anebie Bluetooth connectivity on their end products. 


The complete platform for the EZ430-RF256X Kit is available from http://www.ti.com/tool/mt-bt-sdk. For 
the application described in this report, the required software packet is EZ430-RF256X-SDK-GA. This 
packet contains a sample application that is modified for achieving the simplified Bluetooth pairing via 
NFC. The required modifications are described in this section of the report. 


Detail 


EZ430-RF256X-SDK-GA contains a Penguin Racer application that provides a demonstration of the 
EZ430-RF256X using the MindTree's EtherMind Bluetooth stack and Serial Port Profile (SPP) across a 
point-to-point network. In this demo application, two EZ430-RF256X devices are required. Device A 
collects data from the on-board accelerometer and sends it over the air via the SPP connection to Device 
B. On the other side, Device B receives the data from the SPP connection and sends it out to the USB 
connector (using the UART-to-USB bridge on the EZ430U). For more information on the demo application, 


see the EZ430-RF2560 wiki page. 


The E7430- RE256X i is enabled ¢ ter receive and transmit data over Bluetooth to any Bluetooth- enabled ~ 
device. The received data is transmitted through UART to the MSP430 microcontroller. Similarly, data 
received via the UART bus is eae a Be Eee say ue over he ee Link. Thus, 
this solution pro e 1” nN USCI module. For this 


Bluetooth Link 


= 


MSP430 
MCU 


EZ430-RF2560 


Figure 5. System Overview 


All modifications to the Penguin Racer application required to achieve the UART to Bluetooth Bridge are 
available in the CC256x MT UART BRIDGE wiki. 


Each Bluetooth device has a specific Bluetooth address. This address is required to establish a Bluetooth 
connection. For instance, to connect to an EZ430-RF256X with a Bluetooth-enabled phone, the user must 
scan for Bluetooth devices from the phone's settings and then select the correct device from the list of 
devices available. Each device available is identified with a Bluetooth address. The phone must have a 
Bluetooth address to establish a connection. A second set of modifications to the Penguin Racer 
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6.1 


6.2 


6.2.1 


eee is tals pals so Nhe eel tthe sel He pee beste PA Experimenter Board, the 

= 256X tre its its own Bluetoc Jdress over the UART channel. The MSP430F5529 can then 
eTRETO 970A NFC transceiver module. vuen this is 
56X Bluetooth 


The files listed in Table 2 must be modified to achieve the transmission of the Bluetooth address from the 
EZ430-RF256X to the MSP430F5529 upon request: User_task.c, sdk_common.c, BT_task.h. Table 2 
shows the required changes. A Bluetooth address request is done by the MSP430F5529 by sending a 
0x39 over the UART link. 


Table 2. Software Changes 


File Changes Description 


Add to top of file: Define an array of size 


UCHAR bluetooth_address[BT_BD_ADDR_SIZE]; £ Gai apeiron filers 0 


sdk_common.c 


Add inside of function 
void sdk_set_config_local_name_suffix(UINT32 * name_length_ptr): 
for(int i= BT_BD_ADDR_SIZE; i>0 ; i--) 
bluetooth_address [i-1] = hci_local_bd_addr{i-1]; 
Brifasich Add to top of file: 
ii tua extern UCHAR bluetooth_address[BT_BD_ADDR_SIZE]; 


Add inside of __ interrupt void USB_UART_ISR(void): 
char temp_data; 

temp_data = USB_RXBUF; 

if(temp_data == 0x39) 


Copy the Bluetooth address into Bluetooth 
address. This array ensures the address 
is valid for transmission when requested 


sdk_common.c 


Define a global array to hold Bluetooth 
address 


If a 0x39 is received on USB_RXBUF, 
send the Bluetooth address. Else, store 

the received data in halUsbReceiveBuffer 
for processing 


{ 
Oe Sa for(int i= BT_BD_ADDR_SIZE; i>0 ; i--) 


halUsbSendChar(bluetooth_address [i-1]); 


else 
halUsbReceiveBuffer[bufferSize++] = temp_data; 


TI BT NFC Android™ Application 


Overview 


The purpose of the Android application is to obtain the EZ430-RF256X Bluetooth address from the 
TRF7970A via the NFC link and establish and handle the Bluetooth connection as shown in Figure 1. In 
order to achieve this goal, the phone must support NFC and SPP Bluetooth. The minimum API level for 
NFC support is API 9; thus the minimum version of Android required for this application is Gingerbread 
(Android 2.3 and above). The Nexus S was chosen for this application. This section of the report provides 
a description of the Android programming required to achieve the described task. Basic knowledge of 
Android development is assumed. The developed code supports NDEF data format only. 


NOTE: The device name under the phone's Bluetooth settings must be set to "BlueMSP-Demo". 
This is because the EZ430-RF256X only allows unsecure connections to devices with this 
name. 


Detail 


Application and Ul 


Figure 6 shows the user interface for this application. At the top, a text box displays the text "Place your 
tag close to the phone". When an NFC message is received, the NDEF text is displayed on this box. The 
user is presented with six means to input data: five buttons and a slider bar. Pressing on the Back button 
terminates the Bluetooth connection and returns to the previous activity. Pressing the — button sends a 
value between 0 and 5 that is one less the previous sent value. For instance, if the previous sent value is 
a 4 and the user presses -, a 3 is sent via Bluetooth. If the previous value is a 0 and this button is 
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pressed, a 5 is sent out. Similarly, pressing the + sends a value between 0 and 5 that is one more the 
previous sent value. For instance, if the previous sent value is a 4 and the user presses +, a 5 is sent via 
Bluetooth. If the previous value is a 5 and the + button is pressed, a 0 is sent. The Stop button always 
sends a 0. Tapping on the magical background sends a pattern of numbers (all between 0 and 5). The 
slider bars behaves just like the — and + buttons but provides a faster way to send values. 


Place your tag close to the phone 
nee Se 


Text box: Bluetooth 
address of connected 
device is displayed here 


Magi k 
- agical background 


Sends values in 
Send values in ascending order 


descending order 


Stop button: 
Sends a0 


Back button: feet 
Terminates connection and 


returns to previous screen 
_-~~ Slider bar 


Figure 6. Android Application UI 


6.2.2 NFC Initialization and Handling 


The first step for adding NFC functionality to the Android application is to declare an NFC adapter within 
the Bluetooth Chat activity: 


NfcAdapter mNfcAdapter; 


This line of code declares mNfcAdapter to be of type NfcAdapter; thus, allowing the application to have 
access to the phones’ built-in NFC adapter. Next, the intent and intent filter must be declared so that 
actions can be defined for when an NFC event occurs: 


PendingIntent mNfcPendingIntent ; 
IntentFilter[] mNdefExchangeFilters; 


The intent filter is required so there will be a dispatch to the foreground Activity when Android receives an 
intent matching the created IntentFilter. 
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When the NFC parameters have been declared, definitions are needed. Within the method onCreate, the 
NFC adapter from the phone must be obtained and linked to mNfcAdapter and intents must be defined for 
the intent filters of the application: 


// Get adapter from phone 
mNfcAdapter = NfcAdapter.getDefaultAdapter (this) ; 


// Handle all of our received NFC intents in this activity. 
mNfcPendingIntent = PendingIntent.getActivity(this PersonName, 0 PersonName, new Intent (this 
PersonName, getClass()).addFlags (Intent.FLAG ACTIVITY SINGLE TOP) PersonName, 0) ; 


// Intent filters for reading a note from a tag or exchanging over P2P. 
IntentFilter ndefDetected = new IntentFilter(NfcAdapter.ACTION_TAG DISCOVERED) ; 
mNdefExchangeFilters = new IntentFilter[] ndefDetected ; 


The next step is to enable the pushing and receiving of NDEF messages. This is done by a function call in 
the onResume method: 


// Enable pushing and receiving NDEF messages 
enableNdefExchangeMode() ; 


which looks like this: 


private void enableNdefExchangeMode() { 
mNfcAdapter.enableForegroundDispatch(this, 
mNfcPendingIntent, 
mNdefExchangeFilters, null); 


} 


enableForegroundDispatch sets up the listener for the filtered intent. When an intent matching the intent 
filter is identified, enableForegroundDispatch calls the activity's onNewlntent method: 


public void onNewIntent (Intent intent) { 
// If NFC intent occurred 
if (NfcAdapter.ACTION TAG DISCOVERED.equals(intent.getAction())) { 


// Get NDEF message 
NdefMessage[] msgs = getNdefMessages (intent) ; 


// Store message in a string named "body" 
String body = new String(msgs[0] .getRecords() [0] .getPayload()) ; 


// Make BT address value read by NFC. Body has the BT address of the 
// connecting device (From the NFC adapter) 

String temp string = new String(body.substring(1l, 18)); 
bluetoothAddress = temp string; 

setNoteBody (bluetoothAddress) ; 


setNoteBody is a method for sending the NDEF message to the screen: 


private void setNoteBody(String bluetoothAddress) { 
Editable text = mNote.getText(); 
text .clear(); 
text .append (bluetoothAddress) ; 


} 


getNdefMessages is below. This method is the same as the one in the Sticky Notes demo available on the 
Android development guide. 


NdefMessage[] getNdefMessages(Intent intent) { 

// Parse the intent 

NdefMessage[] msgs = null; 

String action = intent.getAction(); 

if (NfcAdapter.ACTION TAG DISCOVERED.equals(action) | | 
NfcAdapter.ACTION_NDEF_ DISCOVERED.equals(action)) { 


Parcelable[] rawMsgs = intent 
.getParcelableArrayExtra (NfcAdapter.EXTRA_NDEF_ MESSAGES) ; 
if (rawMsgs != null) { 
msgs = new NdefMessage [rawMsgs. length] ; 
for (int i = 0; i < rawMsgs.length; i++) { 
msgs[i] = (NdefMessage) rawMsgs [i]; 
EEE 
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14 


} 


} else { 

// Unknown tag type 

byte[] empty = new byte[] {}; 

NdefRecord record = 

newNdefNdefRecord (NdefRecord.TNF_ UNKNOWN, 

empty, empty, empty) ; 

NdefMessage msg = new NdefMessage(new NdefRecord[] { record }); 
msgs = new NdefMessage[] { msg }; 


} 

} else { 

Log.d(TAG, "Unknown intent.") ; 
finish() ; 


} 


return msgs; 


} 
Finally, the NFC permission and intent filters must be defined in the manifest: 


<uses-permission android:name="android.permission.NFC"> </uses-permission> 


<intent-filter> 
<action android:name="android.nfc.action.TAG DISCOVERED" /> 
<category android:name="android.intent.category.DEFAULT" /> 
</intent-filter> 


Bluetooth Initialization and Handling 


The first step for adding Bluetooth functionality to the Android application is to declare, the BluetoothChat 
activity, a UUID for the connection, a Bluetooth adapter, a Bluetooth socket and two buffers for 
communication: OutputStream and InputStream. 


// well known SPP UUID 


private static final UUID MY_UUID = UUID 
. fromString ("00001101-0000-1000-8000-00805F9B34FB") ; 


// Bluetooth state 


private BluetoothAdapter mBluetoothAdapter = null; 
private BluetoothSocket mBluetoothSocket = null; 


private OutputStream mOutputStream = null; // Output data buffer 
private InputStream mInputStream = null; // Input data buffer 


Next a method to start a Bluetooth connection is called within 'onNewlntent'. 'onNewintent' is called 
whenever an NFC event occurs; thus, a Bluetooth connection occurs only after a message has been 
received by the NFC adapter. This is done, so that a connection only occurs when a valid Bluetooth 
address is available: 


public void onNewIntent (Intent intent) { 


Connection state = BTConnect () ; 


Which looks like this: 


private boolean BTConnect() { 
// Get adapter, open socket and connect 
mBluetoothAdapter = BluetoothAdapter.getDefaultAdapter() ; 
// Check if adapter is available on phone 
if (mBluetoothAdapter == null) { 
return false; 
} 
// Check if Bluetooth is turned on 
if (!mBluetoothAdapter.isEnabled()) { 
Intent enableBtIntent = new Intent (BluetoothAdapter.ACTION_REQUEST_ENABLE) ; 
Intent discoverableIntent = new Intent (BluetoothAdapter.ACTION_REQUEST_DISCOVERABLE) ; 
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discoverableIntent.putExtra(BluetoothAdapter.EXTRA_DISCOVERABLE DURATION, 300); 
startActivityForResult (enableBtIntent, RESULT _OK) ; 
} 
try { 
BluetoothDevice device = mBluetoothAdapter 
.getRemoteDevice (bluetoothAddress) ; 
mBluetoothSocket = device 
.createInsecureRfcommSocketToServiceRecord (MY _UUID) ; 
// Discovery is a heavy weight process: disable while making a connection 
mBluetoothAdapter.cancelDiscovery() ; 
mBluetoothSocket.connect () ; 
// Handle incoming and outgoing BT data 
mOutputStream = mBluetoothSocket.getOutputStream() ; 
mInputStream = mBluetoothSocket.getInputStream() ; 
} catch (Exception e) { 
Context context = getApplicationContext () ; 
CharSequence text = "Failed to Connect"; 
int duration = Toast.LENGTH_ SHORT; 
Toast toast = Toast.makeText (context, text, duration) ; 
toast.setGravity(Gravity.TOP, 0, 0); 
toast.show() ; 
Log.e(TAG, "BTConnect + " + bluetoothAddress, e); 
return false; 
} 
// If connection has been established, return true 
return true; 


} 


When the connection has been established, communication on the Bluetooth channel can begin. A 
method call is used to send bytes from the phone to the connected Bluetooth device through 
mOutputStream: 


private void BTWrite(int b) { 
try { 

// Attempt to write 

mOutputStream.write(b) ; 

} catch (IOException e) { 

// Disconnect if write fails 
Log.e(TAG, "BTWrite" + e); 
BTDisconnect () ; 

} 
} 


The last method implemented for the Bluetooth portion of this Android Application is for connection 
termination. The Bluetooth connection may be terminated by the user of by the EZ430-RF2560 module: 


private void BTClose() { 

txy { 
// Close mOutputStream 
mOutputStream.close() ; 
} catch (Exception e) { 
Log.e(TAG, "BTClose" + e); 

} 

try { 
// Close mInputStream 
mInputStream.close() ; 
} catch (Exception e) { 
Log.e(TAG, "BTClose" + e); 

} 

era <f 
// Close mBluetoothSocket 
mBluetoothSocket.close() ; 
} catch (Exception e) { 
Log.e(TAG, "BTClose" + e); 
} 

mBluetoothSocket = null; 

mBluetoothAdapter = null; 


} 
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Finally, the Bluetooth must be defined in the manifest: 


<uses-permission android:name="android.permission.BLUETOOTH ADMIN" /> 
<uses-permission android:name="android.permission.BLUETOOTH" /> 


1 References 

TRF7970A data sheet (SLOS743) 

ISO/IEC 14443-3:2009(E) (http://www.ansi.org) 

ISO/IEC 14443-4:2008(E) (http://www.ansi.org) 

ISO/IEC 7816-4:2005(E) (http://www.ansi.org) 

ISO/IEC 18092 / ECMA-340 (NFCIP-1) (http://www.ansi.org) 

ISO/IEC21481/ECMA-352 (NFCIP-2) (http://www.ansi.org) 
NFCForum-TS-Type-4-Tag_2.0 (Type 4 Tag Operation Specification) (http:/www.nfc-forum.org) 
NFCForum-TS-NDEF_1.0 (NFC Data Exchange Format (NDEF) Specification) 
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9. NFCForum-TS-ConnectionHandover_1_2 (Connection Handover Technical Specification) 


(http://www.nfc-forum.org) 
10. CCS/IAR MSP430F5529 Firmware Project (weblink) 
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Appendix A Using TRF7970A in ISO14443B Card Emulation 


1. Initialize SPI with SS by using Direct Command 0x03 — 0x83 (Software Initialization) (see Table 5-18 
of the TRF7970A data sheet). 


2. Idle TRF7970A by using 0x00 — 0x80 (Idle) (see Table 5-18 of the TRF7970A data sheet). 
3. Write registers to configure TRF7970A for desired mode (1SO14443B in this example). 
4. Table 3 shows the registers and values to write, in order. 


Table 3. Register Values for 1S014443B Card Emulation at 106 kbps 


0x01 NFC Card Emulation, Type B 
0x0B Regulator, could be set to 0x87 (Auto) 


0x17 0x80123456 Example NFCID/PUPI 
0x16 NFC Low Field Detection Level 


Chip Status Control 


5. Reset the FIFO with Direct Command Ox0F — Ox8F. 
6. Disable/enable receivers with Direct Commands 0x16 — 0x96 and 0x17 — 0x97. 


7. TRF7970A is now configured as an I1S014443B transponder with a NFCID/PUPI of 0x8012345616, 
waiting for field to be presented and commands issued. 
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Appendix B Interaction With Android Handset 


The information here is for the Samsung Nexus §S, running Gingerbread 2.3.4 or higher. 


As previously explained, when using NFC on Android handset with TRF7970A, it can be observed that 
polling is taking place. Case statements are used in the MSP430 code to handle these IRQs: when the 
field changes and generates the IRQ, the IRQ is serviced and then register 0x19 status is read. 


For this document, the value of OxC5 being returned in register 0x19 is the starting point or trigger, and 
these are the details behind Figure 2. 


B.1 18014443B Commands 


The value of 0xC5 (110001012) being returned in Register 0x19 indicates that the command (from the 
handset) was 1SO14443B type at 106 kbps (see the TRF7970A data sheet for full register definition). The 
FIFO Status Register (0x1C) is then read, and the value returned indicates that there are four bytes 
waiting in the TRF7970A FIFO. These bytes are retrieved from the FIFO, and this is the |S014443-3 Type 
B command known as REQB. 


(Value is: APF = 0x05, AFI = 0x00 (all families and sub-families), PARAM = 0x00 (extended ATQB 
not supported by PCD and REQB is being issued, single slot being issued), CRC_B = 0x00) 


The FIFO is then reset. 


The TRF7970A must then respond to this command, following the 15014443-3 specification. This is 
known as Answer to Request B or ATQB. 


Because extended ATQB was not requested in the PARAM byte of the REQB command from the 
handset, the MSP430 firmware code controlling the TRF7970A is (in this example) designed to respond 
with the Basic ATQB format (see Figure 24 in ISO/IEC14443-3 specification). 


This response format is shown in Figure 7. 


byte byte 2, 3% 4%, 5” bytes | pane gee ak 2, 3% 4%, 5” bytes | 67%, 8%, 0" bytes | Teo" 67%, 8%, 0" bytes | 10, 11", 12 bytes 138,14" bytes 14" 138,14" bytes 


30" PUPI Application Data Protocol Info CRC_B 
(1 byte) (4 bytes) (4 bytes) (3 bytes) (2 bytes) 


Figure 7. Response Format, Basic ATQB 


Per the previous statement, the actual response is: 

* ‘1st Byte: 0x50 

¢ 2nd to 5th bytes: 0x80, 0x12, 0x34, 0x56 = PUPI 

* 6th to 9th bytes: 0x40, OxE2, OxAF, 0x11 = Application Data 
* 10th to 12th bytes: 0x80, 0x71, 0x85 = Protocol Info 


* The 13th and 14th bytes (CRC_B) are not handled by the MSP430 code or seen in digital domain (by 
the logic analyzer), as the reader automatically generates these bytes and sends them back to the 
handset over the air. 


The MSP430 code controlling the TRF7970A must preface this response just like any other transmit 
command going out over the air. This means that FIFO must be Reset, Send with CRC Direct Command 
Byte, Write Continuous from the FIFO, and Length Byte are part of the prefix. See the example in 

Figure 8, which shows this meaning directly, but is limited here to showing up to the 7th byte of the ATQB 
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+10 a 2 ae 
O- MOST oo s 


1- SLSVE_SELECT 


Figure 8. UART Communication, Basic ATQB 


The definitions of the values sent (in this example) for the Application Data and Protocol Info bytes (per 
the ISO/IEC 14443-3 specification) are as follows: 


Application Data (4 bytes): 

* 0x40 = AFI for Public Telephony/GSM 

* OxE2, OxAF = CRC_B (AID) 

* 0x11 =# of applications present = 1 application 

Protocol Info (3 bytes): 

* 0x80 = Data Rate Capability (supporting 106 kbps) 

* 0x71 = Protocol Info (Max Frame/Protocol Type) (128 bytes / PICC compliant to -4) 

* 0x85 = (FWI/ADC/FO) (FWT = 77.3 ms, ADC = coded according to AFI, CID supported 


TX complete IRQs are received and serviced and FIFO is reset. 


RX complete IRQ is received and serviced, FIFO status register is read. Value returned indicates 10 bytes 
are waiting in FIFO. 


These 10 bytes (coming in from the handset) are clocked out of the FIFO and they the 1SO014443B 
command called ATTRIB. Byte Values with Definitions (from the ISO standard) are as follows: 

* 0x1D— ATTRIB Command Start Byte (from Handset to MCU through TRF7970A) 

* 0x80 — NFC ID / PUPI (Identifier) 

* 0x12 — NFC ID (Identifier) 

* 0x34 — NFC ID (Identifier) 

* 0x56 — NFC ID / PUPI (Identifier) 

¢ 0x00 — Parameter 1 (0x00 = default value for TRO, TR1, and SOF/EOF required) 


,* 0x08 — Parameter 2 (reader telling PICC that maximum frame size is 256, bit rates are 106 kbps in 
both directions) 


* 0x01 — Parameter 3 (ACK of PICC compliant with -4) 
* 0x00 — Parameter 4 (CID = 0) 
* 0x00 — Higher Layer -INF byte (optional field) 


414300 [Us 


Figure 9. UART Communication, FIFO Status Register Read 
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FIFO is reset and then the Answer to ATTRIB is sent back to the handset. Because there is no higher 
layer request (-INF) in the ATTRIB command, the response, as specified, is one byte, plus two bytes 
CRC_B (which is generated by the reader and is not seen in the digital domain). 


The specified format of the response (without higher layer) is shown in Figure 10. 


” aioe gid bytes 


MBLI CRC_B 
(1 byte) (2 bytes) 


Figure 10. Answer to ATTRIB Format 


Value of the byte with definition (from the ISO standard) is/are as follows: 


* 0x00 — MBLI + CID, where MBLI = 0 means that the TRF7970A (acting as a PICC) is providing no 
information on its internal buffer size and CID = 0, which matches what was sent by the handset, so 
this is the means for the handset PCD to verify that the TRF7970A (acting as a PICC) has been 
successfully selected. 


414400 ys 


B.2 Detection of the NDEF Message 


1. TX Complete IRQ is received and serviced 

2. Register 0x19 is read again and FIFO is reset. 

3. RX Complete IRQ is received and serviced. 

4. Read of the FIFO Status register indicates there are 2 bytes waiting in FIFO. 

5. These bytes are read out and are: 0xB2, 0x80 (ISO14443-4 R(NAK) message, this is used to ‘Ping’ 
if the tag is alive — this is from rule 12 of 1S014443-4 (PICC Rules)) 

6. FIFO is reset 

7. Response to this is: OxA2 (ISO014443-4 R(ACK), the 'Ping' response) 

8. TX Complete IRQ is received and serviced, and Register 0x19 is still OxC5. FIFO is reset. 

9. RX Complete IRQ is received and serviced. 


10. Read of the FIFO Status register indicates there are 2 bytes waiting in FIFO. 
11. These bytes are read out and are: 0xC2, 0x80 (ISO 14443-4 S(DESELECT) request). 
12. FIFO is reset. 


———————— EERE 
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22 


13. 
14. 
15. 


Response to this is: 0x02 (ACK to 1S014443-4 S(DESELECT) response). 
TX Complete IRQ is received, serviced and Register 0x19 is still OxC5. FIFO is reset. 
RX Complete IRQ is received and serviced. 


16. Read of the FIFO Status register indicates there are 4 bytes waiting in FIFO. 

17. These bytes are read out and are: 0x05, 0x00, 0x08, 0x00 (WupB). 

18. FIFO is reset. 

19. Response to command is resending the ATQB. 

20. ATTRIB sent from handset. 

21. Answer to ATTRIB sent from TRF7970A. 

22. RX in 15 bytes from handset: 0x02, 0x00, 0xA4, 0x04, 0x00, 0x07, 0xD2, 0x76, 0x00, 0x00, 0x85, 
0x01, 0x01, 0x00, 0x00 (Detection of NDEF Message, Section 5.4.2, Type 4 Tag Operation 
Specification, Table 10, C-APDU). 

23. FIFO is reset. 

24. Response sent out: 0x02, 0x90, 0x00 (Table 12, SW1, SW2 command completed). 

25. TX complete IRQ received, serviced, FIFO is reset. 

26. RX in 9 bytes from handset: 0x03, 0x00, 0xA4, 0x00, 0x0C, 0x02, 0xE1, 0x03, 0x00 (NDEF 
Capability Container Select Procedure, Table 13, C-APDU, from Type 4 Tag Operation 
Specification 5.4.3). 

27. FIFO is reset. 

28. Response sent out: 0x03, 0x90, 0x00 (Table 15, SW1, SW2 command completed). 

29. TX complete IRQ received and serviced. FIFO is reset. 

30. RX in 7 bytes from handset: 0x02, 0x00, 0xBO, 0x00, 0x00, Ox0F, 0x00 (Read Binary data 
Command from Capability Container file (Table 16, C-APDU, Section 5.4.4)). 

31. FIFO is reset. 

32. Response sent out: 0x02, 0x00, OxOF, 0x20, 0x00, 0x40, 0x00, 0x40, 0x04, 0x06, 0xE1, 0x01, 0x08, 
0x00, 0x00, OxFF, 0x90, 0x00 (Expected Response, with SW1 and SW2 Completed) 

33. TX complete IRQs received and serviced. FIFO is reset. 

34. RX in 9 bytes from handset: 0x03, 0x00, 0xA4, 0x00, 0x0C, 0x02, 0xE1, 0x01, 0x00 (NDEF Select 
Command (Table 19, C-APDU, Section 5.4.5)). 

35. FIFO is reset. 

36. Response sent out: 0x03, 0x90, 0x00 (SW1, SW2 command completed) 

37. TX complete IRQ received and serviced. FIFO is reset. 

38. RX in 7 bytes from handset: 0x02, 0x00, 0xBO, 0x00, 0x00, 0x02, 0x00 (Read Binary for the NLEN 
field of the NDEF file) 

39. FIFO is reset. 

40. Response sent out: 0x02, 0x00, 0x1B, 0x90, 0x00 (where 0x1B is length of NDEF message, SW1 
and SW2 completed). 

41. TX complete IRQ received and serviced. FIFO is reset. 

42. RX in 9 bytes from handset: 0x03, 0x00, 0xA4, 0x00, Ox0C, 0x02, 0xE1, 0x01, 0x00(NDEF Select 
Command (Table 19, C-APDU, Section 5.4.5)). 

43. FIFO is reset. 

44. Response sent out: 0x03, 0x90, 0x00 (SW1, SW2 command completed). 

45. TX complete IRQ received and serviced. FIFO is reset. 

46. RX in 7 bytes from handset: 0x02, 0x00, 0xBO, 0x00, 0x00, 0x1B, 0x00 (Read Data from NDEF File, 
Section 5.4.6). 

47. FIFO reset 

48. Response sent out: 0x02, 0x00, 0x1B, 0xD1, 0x01, 0x17, 0x55, 0x00, 0x44, 0x38, 0x3A, 0x35, 0x34, 
0x3A, 0x33, 0x41, 0x3A, 0x34, 0x39, 0x3A, 0x30, 0x44, 0x3A, 0x41, 0x46, 0x20, 0x00, 0x00, 0x90, 
0x00 — This is NDEF message in hex (see Section 5.4.6), where in ASCII: 
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Detection of the NDEF Message 


(a) Ox02 = STX (Start of Text) 


(b) 0x00 = NULL 


(c) 0x1B = Length of NDEF Message 

(d) OxD1 = NDEF Message Field 

(e) 0x01 = SOH (Start of Heading) 

(f) 0x17 = ETB (End of Transmission Block) 


(g) Ox55 = U 
(h) 0x00 = NULL 


NOTE: Items (i) through (y) are the Bluetooth radio MAC address (in this case, 
D8:54:3A:49:0D:AF) 


(i) 0x44 =D 
(j) 0x38 = 8 
(k) Ox3A =: 

(I) 0x35 =5 
(m) 0x34 = 4 
(n) Ox3A =: 

(0) 0x33 = 3 
(p) 0x41 =A 
(q) Ox3A =: 

(r) 0x34 = 4 
(s) 0x39 = 9 
(t) Ox3A =: 

(u) 0x30 = 0 
(v) 0x44 =D 
(w) Ox3A =: 
(x) Ox41 =A 
(y) 0x46 = F 


(z) 0x20 = SPACE 


(za) 0x00 = NULL 
(zb) 0x00 = NULL 


(zc) 0x90 = SW1 Complete 
(zd) 0x00 = SW2 Complete 


49. TX complete IRQs received and serviced. FIFO is reset. 
50. RX in 7 bytes from handset: 0x03, 0x00, 0xBO, 0x00, 0x1B, 0x02, 0x00 (Read Binary for NLEN 


field). 
51. FIFO is reset. 


52. Response sent out: 0x03, 0x2F, 0x20, 0x90, 0x00. 

53. TX complete IRQ received and serviced. FIFO is reset. 

54. RX in 2 bytes from handset: 0xC2, 0x2F (ISO 14443-4 S-DESELECT request). 

55. RX in 1 bytes from handset: 0xC2 (ISO 14443-4 S-DESELECT response). 

56. Handset Field Reset (IRQ received from the TRF7970A indicating this as status = 0x04). 

57. Register 0x19 read value of 0x05 = 00000101 = Type B command at 106 kbps. 

58. TRF7970A re-initialization sequence started. 

59. At this time, the phone is connected and paired with BT radio if running the TI BT NFC app or 
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1SO14443B tag + NDEF message is processed and ready for viewing if running another tag reading 
app on the handset (like NFC TagInfo, for example). 


eer ————LL————KS. 
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IMPORTANT NOTICE 


Texas Instruments Incorporated and its subsidiaries (Tl) reserve the right to make corrections, modifications, enhancements, improvements, 
and other changes to its products and services at any time and to discontinue any product or service without notice. Customers should 
obtain the latest relevant information before placing orders and should verify that such information is current and complete. All products are 
sold subject to Tl’s terms and conditions of sale supplied at the time of order acknowledgment. 


Tl warrants performance of its hardware products to the specifications applicable at the time of sale in accordance with Tl’s standard 
warranty. Testing and other quality control techniques are used to the extent Tl deems necessary to support this warranty. Except where 
mandated by government requirements, testing of all parameters of each product is not necessarily performed. 


TI assumes no liability for applications assistance or customer product design. Customers are responsible for their products and 
applications using T| components. To minimize the risks associated with customer products and applications, customers should provide 
adequate design and operating safeguards. 


TI does not warrant or represent that any license, either express or implied, is granted under any TI patent right, copyright, mask work right, 
or other TI intellectual property right relating to any combination, machine, or process in which TI products or services are used. Information 
published by TI regarding third-party products or services does not constitute a license from TI to use such products or services or a 
warranty or endorsement thereof. Use of such information may require a license from a third party under the patents or other intellectual 
property of the third party, or a license from TI under the patents or other intellectual property of TI. 


Reproduction of TI information in T| data books or data sheets is permissible only if reproduction is without alteration and is accompanied 
by all associated warranties, conditions, limitations, and notices. Reproduction of this information with alteration is an unfair and deceptive 
business practice. Tl is not responsible or liable for such altered documentation. Information of third parties may be subject to additional 
restrictions. 


Resale of Tl products or services with statements different from or beyond the parameters stated by TI for that product or service voids all 
express and any implied warranties for the associated TI product or service and is an unfair and deceptive business practice. TI is not 
responsible or liable for any such statements. 


Tl products are not authorized for use in safety-critical applications (such as life support) where a failure of the Tl product would reasonably 
be expected to cause severe personal injury or death, unless officers of the parties have executed an agreement specifically governing 
such use. Buyers represent that they have all necessary expertise in the safety and regulatory ramifications of their applications, and 
acknowledge and agree that they are solely responsible for all legal, regulatory and safety-related requirements concerning their products 
and any use of TI products in such safety-critical applications, notwithstanding any applications-related information or support that may be 
provided by Tl. Further, Buyers must fully indemnify Tl and its representatives against any damages arising out of the use of TI products in 
such safety-critical applications. 


Tl products are neither designed nor intended for use in military/aerospace applications or environments unless the TI products are 
specifically designated by TI as military-grade or "enhanced plastic." Only products designated by TI as military-grade meet military 
specifications. Buyers acknowledge and agree that any such use of TI products which TI has not designated as military-grade is solely at 
the Buyer's risk, and that they are solely responsible for compliance with all legal and regulatory requirements in connection with such use. 


Tl products are neither designed nor intended for use in automotive applications or environments unless the specific TI products are 
designated by TI as compliant with ISO/TS 16949 requirements. Buyers acknowledge and agree that, if they use any non-designated 
products in automotive applications, TI will not be responsible for any failure to meet such requirements. 


Following are URLs where you can obtain information on other Texas Instruments products and application solutions: 


Products Applications 

Audio www.ti.com/audio Communications and Telecom www.ti.com/communications 
Amplifiers amplifier.ti.com Computers and Peripherals www.ti.com/computers 

Data Converters dataconverter.ti.com Consumer Electronics www.ti.com/consumer-apps 
DLP® Products www.dip.com Energy and Lighting www.ti.com/energy 

DSP dsp.ti.com Industrial www.ti.com/industrial 
Clocks and Timers www.ti.com/clocks Medical www.ti.com/medical 
Interface interface.ti.com Security www.ti.com/security 

Logic logic.ti.com Space, Avionics and Defense www.ti.com/space-avionics-defense 
Power Mgmt power.ti.com Transportation and Automotive www.ti.com/automotive 
Microcontrollers microcontroller.ti.com Video and Imaging www.ti.com/video 

RFID www.ti-rfid.com 


OMAP Mobile Processors www.ti.com/omap 


Wireless Connectivity www.ti.com/wirelessconnectivity 
Tl E2E Community Home Page e2e.ti.com 


Mailing Address: Texas Instruments, Post Office Box 655303, Dallas, Texas 75265 
Copyright © 2011, Texas Instruments Incorporated 
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